1 |
2 |
4 |
5 |
Click Next to select the events to forward based on subsystem and event date. Once the subscription is created the starting event date and time cannot be changed. |
• |
By default, events start sending after the subscription is created. To change when to begin sending events, click Send events starting and select the desired date and time. The time cannot be more than 30 days prior to the Change Auditor installation date. |
6 |
Click Finish. |
1 |
1 |
5 |
Click Finish. |
1 |
1 |
2 |
Click Refresh. |
Use this command to create the subscription required to send Change Auditor event data to ArcSight.
$allSubsystems = Get-CAEventExportSubsystems -Connection $connection
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center